AWS Cloud Security Engineer - Multi-Account & OT Edge

On.Energy; Buenos Aires; On-site; ARS 136,174,000 - 211,826,000; Full time

Job summary

ON.energy is seeking a senior cloud security engineer to bolster the resilience of our energy and AI infrastructure. You will own multi-account AWS security, define guardrails, and design secure cloud-to-site connectivity for our data centers and remote assets.

You will implement threat detection, incident response runbooks, and vulnerability management across workloads, images, and dependencies, working closely with OT security and IT teams to enforce least privilege and robust security

Qualifications

• 5+ years in cloud security with hands-on AWS.
• Production experience in multi-account AWS environments.
• Ability to explain intrusion paths and mitigations end-to-end.
• Site-to-cloud security and network segmentation experience.
• Advanced English (B2–C1) for daily work.

Responsibilities

• Design and implement cloud security foundations across AWS accounts via IaC.
• Enforce security standards and review gates to block risky deploys.
• Manage IAM Identity Center with Entra ID integration.
• Secure site-to-cloud connectivity and OT/IT segmentation across facilities.
• Develop threat detection, monitoring, and runbooks mapped to MITRE ATT&CK.
• Lead vulnerability management across workloads and dependencies.

Skills

Cloud security

AWS multi-account

IAM & Entra ID

Network segmentation

Threat detection

Infrastructure as code

Tools

GuardDuty

Security Hub

Inspector

CloudTrail

KMS

WAF

CloudFormation

CDK

Terraform

Job description

ON.energy is seeking a senior cloud security engineer to bolster the resilience of our energy and AI infrastructure. You will own multi-account AWS security, define guardrails, and design secure cloud-to-site connectivity for our data centers and remote assets.

You will implement threat detection, incident response runbooks, and vulnerability management across workloads, images, and dependencies, working closely with OT security and IT teams to enforce least privilege and robust security